Ontraport gives you several ways to build a form: forms on Ontraport Pages, Ontraport Forms, also called Ontraforms, and legacy HTML forms. And if you build your website with an AI tool connected to Ontraport, you can ask it to add a form for you. The right choice depends on where your form will live, how it should appear, and how you edit your site. Here's how to choose.
If your page is built with Ontraport Pages, start here. You build the form right on the page, using the Forms and Sales elements: form fields, a submit button, reCAPTCHA, and order form pieces like billing address, credit card and order bumps. It's also the best way to build multi-step forms. And if you're selling, order forms on Ontraport Pages take care of the PCI security requirements for you.
Use an Ontraform in two situations. First, when your page is built somewhere else, like your own website or another page builder. Second, when you want a form to pop up as a lightbox, even on an Ontraport Page.
Ontraforms are standalone forms. To create one, go to Automations, then Forms, click New Form, and choose Ontraform. Start from a template or from scratch, and build by stacking blocks. The Smart Form block collects contact information.
On an Ontraport Page, turn on the Ontraform settings in your page settings to pop up the form based on scroll percentage, time on the page, or exit intent. You can also link a button to the form, so it pops up when someone clicks.
On another site, click Publish to get the code. You can embed the form in the page, or show it as an automatic or click-to-pop lightbox. Then paste the code just above the page's closing body tag.
Need a multi-step form that pops up? Build it with Ontraforms. One caution if you're selling: an Ontraform order form on another site needs that site to meet PCI requirements, and order forms only display on a secure https page.
If you build your website with an AI tool that's connected to Ontraport through its MCP server, you can ask the AI to add an Ontraport form, styled to match your site. These forms appear in your Forms collection labeled API Form. You change them by asking your AI, not in Ontraport's form editor. They can't take payments, and they don't support captcha or conditional redirects yet, so choose another builder when you need those.
The third option is legacy HTML forms, for web developers who want full control over the code. They're more customizable than Ontraforms, but they're a legacy feature and less secure. They can leave your site open to list bombing attacks, which flood your list with fake contacts. Ontraforms are JavaScript forms, and they protect you much better.
Under My account, then Administration, then Security, there's a toggle called Disable Custom HTML Forms. Ontraport recommends keeping it on unless you're actively using HTML forms, so no one on your team can add a less secure form by accident. If you do keep HTML forms enabled, Ontraport automatically puts suspicious contacts into groups so you can review them.
So: build on Ontraport Pages when you can, use an Ontraform for pop-ups and pages built elsewhere, and save legacy HTML forms for developers who truly need them. Next up, we'll take a closer look at forms on Ontraport Pages.